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CLAIMS 

1. An apparatus for performing cryptographic operations, 
comprising: 

a cryptographic instruction, received by a computing 
device as part of an instruction flow executing 
on said computing device, wherein said 
cryptographic instruction prescribes one of the 
cryptographic operations, and wherein said 
cryptographic instruction prescribes one of a 
plurality of cryptographic key sizes; and 

execution logic, operatively coupled to said 

cryptographic instruction, configured to execute 
said one of the cryptographic operations, said 
execution logic comprising: 

a key size controller, configured to employ said 
one of a plurality of cryptographic key 
sizes during execution of said one of the 
cryptographic operations. 

2. The apparatus as recited in claim 1, wherein said one 
of the cryptographic operations further comprises: 

an encryption operation, said encryption operation 

comprising encryption of a plurality of plaintext 
blocks to generate a corresponding plurality of 
ciphertext blocks. 
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3. The apparatus as recited in claim 1, wherein said one 
of the cryptographic operations further comprises: 

a decryption operation, said decryption operation 
comprising decryption of a plurality of 
ciphertext blocks to generate a corresponding 
plurality of plaintext blocks. 

4. The apparatus as recited in claim 1, wherein said one 
of a plurality of cryptographic key sizes comprises 
128 bits. 

5. The apparatus as recited in claim 1, wherein said one 
of a plurality of cryptographic key sizes comprises 
192 bits. 

6. The apparatus as recited in claim 1, wherein said one 
of a plurality of cryptographic key sizes comprises 
256 bits. 

7. The apparatus as recited in claim 1, wherein said one 
of the cryptographic operations is executed according 
to the Advanced Encryption Standard (AES) algorithm. 

8. The apparatus as recited in claim 1, wherein said key 
size controller is configured to interpret a key size 
field within a control word which is referenced by 
said cryptographic instruction. 


9. 


The apparatus as recited in claim 1, wherein said 
cryptographic instruction is prescribed according to 
the x86 instruction format. 
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10. The apparatus as recited in claim 1, wherein said 
cryptographic instruction implicitly references a 
plurality of registers within said computing device. 

11. The apparatus as recited in claim 10 wherein said 
plurality of registers comprises: 

a first register, wherein contents of said first 
register comprise a first pointer to a first 
memory address, said first memory address 
specifying a first location in memory for access 
of a plurality of input text blocks upon which 
said one of the cryptographic operations is to be 
accomplished. 

12. The apparatus as recited in claim 10, wherein said 
plurality of registers comprises: 

a second register, wherein contents of said second 
register comprise a second pointer to a second 
memory address, said second memory address 
specifying a second location in said memory for 
storage of a corresponding plurality of output 
text blocks, said corresponding plurality of 
output text blocks being generated as a result of 
accomplishing said one of the cryptographic 
operations upon a plurality of input text blocks. 

13. The apparatus as recited in claim 10, wherein said 
plurality of registers comprises: 
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a third register, wherein contents of said third 
register indicate a number blocks within a 
plurality of input text blocks. 

14. The apparatus as recited in claim 10, wherein said 
plurality of registers comprises: 

a fourth register, wherein contents of said fourth 
register comprise a third pointer to a third 
memory address, said third memory address 
specifying a third location in memory for access 
of cryptographic key data for use in 
accomplishing said one of the cryptographic 
operations. 

15. The apparatus as recited in claim 14, wherein said 
cryptographic key data comprises a cryptographic key 
comprising a number of bits according to said one of a 
plurality of cryptographic key sizes. 

16. The apparatus as recited in claim 14, wherein said 
cryptographic key data comprises a user-generated 
cryptographic key schedule. 

17. The apparatus as recited in claim 10, wherein said 
plurality of registers comprises: 
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a fifth register, wherein contents of said fifth 

register comprise a fourth pointer to a fourth 
memory address, said fourth memory address 
specifying a fourth location in memory, said 
fourth location comprising said initialization 
vector location, contents of said initialization 
vector location comprising an initialization 
vector or initialization vector equivalent for 
use in accomplishing said one of the 
cryptographic operations. 

18. The apparatus as recited in claim 10, wherein said 
plurality of registers comprises: 

a sixth register, wherein contents of said sixth 
register comprise a fifth pointer to a fifth 
memory address, said fifth memory address 
specifying a fifth location in memory for access 
of a control word for use in accomplishing said 
one of the cryptographic operations, wherein said 
control word prescribes cryptographic parameters 
for said one of the cryptographic operations, and 
wherein said control word comprises: 

a key size field, configured to specify said one 
of a plurality of cryptographic key sizes to 
be employed during execution of said one of 
the cryptographic operations . 

19. The apparatus as recited in claim 1, wherein said 
execution logic comprises: 
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a cryptography unit, configured execute a plurality of 
cryptographic rounds on each of a plurality of 
input text blocks to generate a corresponding 
each of a plurality of output text blocks, 
wherein said one of a plurality of cryptographic 
key sizes is prescribed by a control word that is 
provided to said key size controller within said 
cryptography unit . 

20. An apparatus for performing cryptographic operations, 
comprising: 

a cryptography unit within a device, configured to 
execute one of the cryptographic operations 
responsive to receipt of a cryptographic 
instruction within an instruction flow that 
prescribes said one of the cryptographic 
operations, wherein said cryptographic 
instruction also prescribes a key size to be 
employed when executing said one of the 
cryptographic operations; and 

key size control logic, operatively coupled within 

said cryptography unit, configured to direct said 
device to employ said key size when performing 
said one of the cryptographic operations. 

21. The apparatus as recited in claim 20, wherein said key 
size comprises 128-bits. 

22. The apparatus as recited in claim 20, wherein said key 
size comprises 192-bits. 
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23. The apparatus as recited in claim 20, wherein said key- 
size comprises 256-bits. 

24. The apparatus as recited in claim 20, wherein said one 
of the cryptographic operations is executed according 
to the Advanced Encryption Standard (AES) algorithm. 

25. The apparatus as recited in claim 20, wherein said key 
size control logic is configured to interpret a key 
size field within a control word which is referenced 
by said cryptographic instruction. 

26. The apparatus as recited in claim 20, wherein said 
cryptographic instruction is prescribed according to 
the x86 instruction format. 

27. A method for performing cryptographic operations in a 
device, the method comprising: 

receiving a cryptographic instruction that prescribes 
cryptographic key size for employment during 
execution of one of a plurality of cryptographic 
operations; and 

employing the cryptographic key size when executing 
the one of the cryptographic operations. 

28. The method as recited in claim 27, wherein said 
receiving comprises: 

via a field within a control word that is referenced 
by the cryptographic instruction, specifying the 
cryptographic key size. 
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29. The method as recited in claim 28, wherein said 
specifying comprises: 

prescribing 128 bits as the cryptographic key size. 

30. The method as recited in claim 28, wherein said 
specifying comprises: 

prescribing 192 bits as the cryptographic key size. 

31. The method as recited in claim 28, wherein said 
specifying comprises: 

prescribing 256 bits as the cryptographic key size. 

32. The method as recited in claim 27, wherein said 
employing comprises: 

executing the one of the cryptographic operations 
according to the Advanced Encryption Standard 
(AES) algorithm. 

33. The method as recited in claim 27, wherein said 
receiving comprises : 

prescribing the cryptographic instruction according to 
the x86 instruction format. 


